$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft File: HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft (raw, json) Hash identifier: kt5tWlOPw4cyGRmDPYs3+sBo/cbnxAMccM6Bm+4Je+A= Subject key identifier: 77:FB:99:3F:88:B6:E5:03:47:82:57:90:B2:B6:6E:BB:46:98:B7:39 Authority key identifier: 1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 Certificate issuer: /CN=A913277C/serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft Manifest number: DA Signing time: Sun 19 May 2024 06:04:00 +0000 Manifest this update: Sun 19 May 2024 06:03:59 +0000 Manifest next update: Sun 26 May 2024 06:03:59 +0000 Files and hashes: 1: HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl (hash: P3nL6h01JhYdZ5sHEO6fSOAjamrwPLV9lw3jtJJrTug=) 2: 1EF2D862C9F511ED8771C865C4F9AE02.roa (hash: P+uq7WBg06+zHlN3uA88TkBnHi2bGu6YyGHpZu3034g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913277C/serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1 Validity Not Before: May 19 06:03:59 2024 GMT Not After : May 26 06:03:59 2024 GMT Subject: CN=6649964f-493b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6e:4f:0e:2f:38:6b:7e:09:aa:55:5b:06:e8: 8a:fe:5f:23:e2:60:b9:2c:cc:f4:46:81:92:59:2b: f0:54:63:b2:18:c3:8d:56:97:f4:74:c2:02:b8:f4: 2f:19:cc:df:69:ed:f8:8a:b1:f0:bf:ad:91:ec:05: 33:6a:38:37:aa:f9:aa:fa:72:66:03:e9:87:31:bd: f9:8b:96:64:c8:4c:a1:bf:5e:79:d9:c5:b5:9c:27: fe:bc:e2:b9:5d:d7:ac:4d:53:56:0f:d3:ec:0d:4b: 00:93:ac:8c:9f:16:34:14:84:f3:bf:21:4e:2a:14: 7c:0f:71:18:c3:6d:ad:6f:ef:9f:4f:ff:09:75:69: 47:c1:b8:8d:f9:93:d0:c6:51:c2:31:ef:b3:71:a9: 4a:8f:52:0d:c3:41:95:b2:43:6a:14:60:2b:6f:77: 9b:83:3b:7d:d0:82:7d:89:82:85:04:9f:7e:fa:84: 5d:c7:b4:5d:80:56:7a:81:33:1b:37:5c:f3:d0:6d: 53:77:03:bc:a6:b3:83:2c:99:6e:95:34:b7:45:ef: cd:6b:1a:57:af:50:c9:85:6a:11:bf:d0:8e:c9:68: 89:17:ed:48:9d:31:6e:60:27:f8:c3:cb:bd:ca:70: 1e:94:b7:61:b0:0c:33:fb:77:d7:45:1d:70:a3:bd: 6b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FB:99:3F:88:B6:E5:03:47:82:57:90:B2:B6:6E:BB:46:98:B7:39 X509v3 Authority Key Identifier: keyid:1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9f:ff:e2:71:8a:58:91:d4:d2:6d:e9:d9:45:95:79:39:e0: db:07:2f:fd:0a:8f:03:c9:e2:54:7f:06:c7:cd:8e:c6:e3:13: 67:71:a9:1c:0f:b1:70:c1:39:2a:60:06:0c:d5:35:02:28:5e: bd:4c:1f:d7:58:cd:d0:cf:ca:b7:8b:28:54:a3:9b:86:0a:fb: 01:ab:e5:4a:62:24:3f:03:f3:8b:88:4b:68:bc:a0:79:55:52: b0:8f:3c:13:74:87:79:71:74:07:55:42:4a:d9:9b:00:97:cb: f5:29:3f:be:cf:58:35:73:f6:bb:7c:d1:ab:17:43:2b:9e:34: 7d:69:a5:f2:80:ce:84:53:27:0a:5b:42:50:bb:11:25:8d:34: e9:16:ee:45:f2:7f:76:54:95:f9:a9:c0:e3:46:49:1f:07:62: 76:55:94:58:22:7f:df:79:79:a5:6b:f2:ee:dd:13:0a:0b:e1: 09:65:9d:de:10:4a:25:bc:a6:1d:5e:3d:2c:70:9b:ca:b1:bb: 01:ed:43:22:05:46:9b:d7:02:70:e2:90:97:c3:9b:ba:ee:24: a8:28:22:af:b2:95:a0:2b:55:aa:7a:12:3b:08:bc:6e:db:1a: 8f:f3:1e:4e:a1:4c:2f:76:b6:c3:2c:e3:b9:c0:af:cc:78:5c: 5e:75:74:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI3N0MxMTAvBgNVBAUTKDFDRDQ5RUZCQzM3RUY0QThDNkM4ODc2NTYyQkQxMTMz NDRCQzdFRDEwHhcNMjQwNTE5MDYwMzU5WhcNMjQwNTI2MDYwMzU5WjAYMRYwFAYD VQQDEw02NjQ5OTY0Zi00OTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt25PDi84a34JqlVbBuiK/l8j4mC5LMz0RoGSWSvwVGOyGMONVpf0dMICuPQv Gczfae34irHwv62R7AUzajg3qvmq+nJmA+mHMb35i5ZkyEyhv1552cW1nCf+vOK5 XdesTVNWD9PsDUsAk6yMnxY0FITzvyFOKhR8D3EYw22tb++fT/8JdWlHwbiN+ZPQ xlHCMe+zcalKj1INw0GVskNqFGArb3ebgzt90IJ9iYKFBJ9++oRdx7RdgFZ6gTMb N1zz0G1TdwO8prODLJlulTS3Re/NaxpXr1DJhWoRv9COyWiJF+1InTFuYCf4w8u9 ynAelLdhsAwz+3fXRR1wo71rswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHf7mT+I tuUDR4JXkLK2brtGmLc5MB8GA1UdIwQYMBaAFBzUnvvDfvSoxsiHZWK9ETNEvH7R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjc3Qy9COTdDNzM5NkM5 RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlLakd5SWRsWXIwUk0wUzhm dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hOU2UtOE4tOUtqR3lJZGxZcjBSTTBTOGZ0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mjc3Qy9COTdDNzM5NkM5RjIxMUVEQTFEOTlFNjVDNEY5QUUwMi9ITlNlLThOLTlL akd5SWRsWXIwUk0wUzhmdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnn//icYpYkdTSbenZRZV5OeDbBy/9Co8DyeJUfwbHzY7G4xNncakc D7FwwTkqYAYM1TUCKF69TB/XWM3Qz8q3iyhUo5uGCvsBq+VKYiQ/A/OLiEtovKB5 VVKwjzwTdId5cXQHVUJK2ZsAl8v1KT++z1g1c/a7fNGrF0MrnjR9aaXygM6EUycK W0JQuxEljTTpFu5F8n92VJX5qcDjRkkfB2J2VZRYIn/feXmla/Lu3RMKC+EJZZ3e EEolvKYdXj0scJvKsbsB7UMiBUab1wJw4pCXw5u67iSoKCKvspWgK1WqehI7CLxu 2xqP8x5OoUwvdrbDLOO5wK/MeFxedXTF -----END CERTIFICATE-----Generated at Sun May 19 08:25:00 2024 by rpki-client on console-ams.rpki-client.org